Adware/Cdnhelper

description-logoAnalysis

This Adware is also known as a "browser helper object" (BHO). It loads as an add-on to the Internet browser Internet Explorer. Commonly this BHO will be stored on the system in this path and file name -

C:\Program Files\CNNIC\Cdn\cdniehlp.dll

The BHO is installed via a .CAB file from a web site hosted in China. The BHO provides advertisement delivery to the web surfing experience.

recommended-action-logoRecommended Action


    FortiGate systems:
  • check the main screen using the web interface to ensure the latest AV/NIDS database has been downloaded and installed -- if required, enable the "Allow Push Update" option

Telemetry logoTelemetry

Detection Availability

FortiClient
Extreme
FortiMail
Extreme
FortiSandbox
Extreme
FortiWeb
Extreme
Web Application Firewall
Extreme
FortiIsolator
Extreme
FortiDeceptor
Extreme
FortiEDR

Version Updates

Date Version Detail
2023-06-27 91.04592
2023-06-27 91.04590
2023-06-27 91.04583
2023-06-13 91.04163
2023-05-06 91.03031
2023-04-18 91.02476
2023-04-17 91.02447
2023-03-28 91.01840
2023-03-14 91.01420
2023-03-12 91.01347